Principal AI Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Direct the technical strategy for securing AI applications, autonomous agents, and AI-enhanced engineering workflows at Zip.

• Design and implement scalable security measures for LLM applications, RAG systems, and agentic AI platforms.

• Create AI security testing protocols, automation, and secure-by-default engineering methodologies.

• Define and execute security architecture for LLM applications, RAG, autonomous agents, and AI-powered solutions.

• Develop defenses against prompt injection, data exfiltration, insecure tool execution, excessive agency, and other AI-specific vulnerabilities.

• Establish secure patterns for model access, NHI access, authorization, secrets management, and protection of sensitive data.

• Design security boundaries for AI agents interacting with enterprise systems, APIs, databases, and cloud infrastructures.

• Implement secure-by-default patterns, harnesses, and guardrails for AI coding assistants, autonomous development agents, and AI-generated software.

• Secure MCP servers, integrations of agent tools, and AI-enabled development workflows.

• Create reusable security components, APIs, and automation that integrate into engineering platforms and CI/CD pipelines.

• Develop automated security testing and evaluation capabilities for AI applications and agents.

• Initiate AI red teaming, prompt injection testing, and security regression testing.

• Implement monitoring and detection systems for suspicious AI behavior, unauthorized tool execution, and exposure of sensitive data.

• Conduct post-incident responses for agent misalignment and collaborate with the Agentic Platform team to prevent future occurrences.

• Utilize AI to automate threat modeling, vulnerability analysis, and remediation processes.

• Set the technical direction and engineering standards for AI security at Zip.

• Collaborate with engineering teams to transition secure AI solutions from architecture to production.

• Design risk-tiering logic that aligns with Zip's 5-level AI automation classification.

• Share ownership of the security evaluation framework for new AI models and third-party tools.

• Assess emerging AI technologies and security capabilities, making informed build-versus-buy choices.

• Mentor engineers and impact technical decisions across security, platform engineering, and software development.

• Achievements include scalable AI security architecture, reusable controls, integrated testing/monitoring/enforcement, reduced manual effort, and fostering secure innovation.

⛳️ Requirements

• Proven experience in Staff or Principal-level technical leadership within security engineering, application security, or cloud security.

• Extensive security engineering expertise along with practical experience with LLM/agent systems.

• Thorough understanding of OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF.

• Strong grasp of LLM architectures, agentic systems, RAG, and contemporary AI development frameworks.

• Experience in developing AI security evaluations, red-teaming capabilities, model security gateways, and fortifying AI systems against prompt injection, data leakage, tool misuse, and unauthorized access.

• Strong software engineering capabilities, including proficiency in Python or another modern programming language.

• Familiarity with cloud-native architectures, APIs, containers, IAM, and modern software delivery methodologies.

• Ability to design and enforce security controls, automation, and reusable engineering components.

• Experience in threat modeling complex systems and translating security requirements into actionable solutions.

• Strong technical leadership qualities with the capacity to influence architectural and engineering decisions across teams.

• A builder's mindset focused on automation, scalability, and secure-by-default engineering practices.

• Highly regarded: Experience with LangChain, LangGraph, Semantic Kernel, OpenAI APIs, Azure AI, Google Vertex AI, or similar technologies.

• Highly regarded: Experience securing MCP servers, autonomous coding agents, or agentic workflows.

• Highly regarded: Familiarity with Microsoft Azure, Google Cloud Platform (GCP), Terraform, Kubernetes, and CI/CD security.

• Highly regarded: Experience in financial services, payments, or other regulated environments.

• Visa sponsorship is not available for this position.

🏝️ Benefits

• Flexible working culture.

• Incentive programs.

• Unlimited PTO.

• Generous paid parental leave.

• Leading family support policies.

• Company-sponsored 401k match.

• Learning and wellness subscription stipend.

• Beautiful Union Square office with a casual dress code.

• Industry-leading, employer-sponsored insurance for you and your dependents, with several 100% Zip-covered options available.

• Bonus and/or commission awards may be included in total compensation.

• Visa sponsorship is not available for this position.